VYPR

PHP Nuke Platinum

by Futurenuke

CVEs (2)

  • CVE-2008-1680Apr 4, 2008
    risk 0.03cvss epss 0.04

    PHP-Nuke Platinum 7.6.b.5 allows remote attackers to obtain configuration information via a direct request to maintenance/index.php, which reveals settings such as magic_quotes_gpc.

  • CVE-2008-1539Mar 28, 2008
    risk 0.03cvss epss 0.00

    SQL injection vulnerability in includes/dynamic_titles.php in PHP-Nuke Platinum 7.6.b.5 allows remote attackers to execute arbitrary SQL commands via the p parameter to modules.php for the Forums module.